CVE-2024-22457 — Dell / Secure Connect Gateway (SCG) 5.0 Appliance - SRS

Description (CNA)

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

Affected (CNA)

Vendor / product	Versions
Dell / Secure Connect Gateway (SCG) 5.0 Appliance - SRS	affected 5.20.00.10

CWE

CWE-290

References

https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.